diff options
author | netblue30 <netblue30@yahoo.com> | 2016-06-19 06:10:33 -0400 |
---|---|---|
committer | GitHub <noreply@github.com> | 2016-06-19 06:10:33 -0400 |
commit | 148ccdd991e61038ecc3980be2b2d6e3e321ce0b (patch) | |
tree | f6714cd1465afb29c42b9e0441db7ed00ab516bd /etc | |
parent | Merge pull request #579 from KellerFuchs/disable-common (diff) | |
parent | added libreoffice profile (diff) | |
download | firejail-148ccdd991e61038ecc3980be2b2d6e3e321ce0b.tar.gz firejail-148ccdd991e61038ecc3980be2b2d6e3e321ce0b.tar.zst firejail-148ccdd991e61038ecc3980be2b2d6e3e321ce0b.zip |
Merge pull request #580 from Fred-Barclay/proposed
added libreoffice profile
Diffstat (limited to 'etc')
-rw-r--r-- | etc/disable-programs.inc | 1 | ||||
-rw-r--r-- | etc/libreoffice.profile | 14 |
2 files changed, 15 insertions, 0 deletions
diff --git a/etc/disable-programs.inc b/etc/disable-programs.inc index 6e79b3be0..6c166c186 100644 --- a/etc/disable-programs.inc +++ b/etc/disable-programs.inc | |||
@@ -16,6 +16,7 @@ blacklist ${HOME}/.config/stellarium | |||
16 | blacklist ${HOME}/.config/atril | 16 | blacklist ${HOME}/.config/atril |
17 | blacklist ${HOME}/.config/xreader | 17 | blacklist ${HOME}/.config/xreader |
18 | blacklist ${HOME}/.config/xviewer | 18 | blacklist ${HOME}/.config/xviewer |
19 | blacklist $(HOME)/.config/libreoffice | ||
19 | blacklist ${HOME}/.kde/share/apps/okular | 20 | blacklist ${HOME}/.kde/share/apps/okular |
20 | blacklist ${HOME}/.kde/share/config/okularrc | 21 | blacklist ${HOME}/.kde/share/config/okularrc |
21 | blacklist ${HOME}/.kde/share/config/okularpartrc | 22 | blacklist ${HOME}/.kde/share/config/okularpartrc |
diff --git a/etc/libreoffice.profile b/etc/libreoffice.profile new file mode 100644 index 000000000..9056b1df2 --- /dev/null +++ b/etc/libreoffice.profile | |||
@@ -0,0 +1,14 @@ | |||
1 | # Firejail profile for LibreOffice | ||
2 | noblacklist ~/.config/libreoffice | ||
3 | include /etc/firejail/disable-common.inc | ||
4 | include /etc/firejail/disable-programs.inc | ||
5 | include /etc/firejail/disable-devel.inc | ||
6 | include /etc/firejail/disable-passwdmgr.inc | ||
7 | |||
8 | caps.drop all | ||
9 | netfilter | ||
10 | nonewprivs | ||
11 | noroot | ||
12 | protocol unix,inet,inet6,netlink | ||
13 | seccomp | ||
14 | tracelog | ||